Skip to content

chore: update dependencies#131

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/dependencies
Open

chore: update dependencies#131
renovate[bot] wants to merge 1 commit intomainfrom
renovate/dependencies

Conversation

@renovate
Copy link

@renovate renovate bot commented May 26, 2025

Update Request | Renovate Bot

This PR contains the following updates:

Package Type Update Change
actions/checkout action digest 8e8c4830c366fd
actions/runner minor 2.331.02.332.0
actions/stale action digest 9971854b5d41d4
aws/aws-cli minor 2.33.42.34.4
docker/login-action action digest 5e57cd1db14339
docker/setup-buildx-action action digest 8d2750c8f54c6f
getsops/sops minor v3.11.0v3.12.1
google/go-containerregistry minor v0.20.7v0.21.2
helm/helm patch v4.1.0v4.1.1
kenchan0130/actions-system-info action digest 59699593f60d5f
kubernetes-sigs/krew minor v0.4.5v0.5.0
kubernetes/kubernetes patch v1.35.0v1.35.2
mikefarah/yq minor v4.50.1v4.52.4
slackapi/slack-github-action action digest 91efab13a8b606

Release Notes

actions/runner (actions/runner)

v2.332.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/runner@v2.331.0...v2.332.0

Note: Actions Runner follows a progressive release policy, so the latest release might not be available to your enterprise, organization, or repository yet.
To confirm which version of the Actions Runner you should expect, please view the download instructions for your enterprise, organization, or repository.
See https://docs.github.com/en/enterprise-cloud@latest/actions/hosting-your-own-runners/adding-self-hosted-runners

Windows x64

We recommend configuring the runner in a root folder of the Windows drive (e.g. "C:\actions-runner"). This will help avoid issues related to service identity folder permissions and long file path restrictions on Windows.

The following snipped needs to be run on powershell:

# Create a folder under the drive root
mkdir \actions-runner ; cd \actions-runner

# Download the latest runner package
Invoke-WebRequest -Uri https://github.com/actions/runner/releases/download/v2.332.0/actions-runner-win-x64-2.332.0.zip -OutFile actions-runner-win-x64-2.332.0.zip

# Extract the installer
Add-Type -AssemblyName System.IO.Compression.FileSystem ;
[System.IO.Compression.ZipFile]::ExtractToDirectory("$PWD\actions-runner-win-x64-2.332.0.zip", "$PWD")

Windows arm64

We recommend configuring the runner in a root folder of the Windows drive (e.g. "C:\actions-runner"). This will help avoid issues related to service identity folder permissions and long file path restrictions on Windows.

The following snipped needs to be run on powershell:

# Create a folder under the drive root
mkdir \actions-runner ; cd \actions-runner

# Download the latest runner package
Invoke-WebRequest -Uri https://github.com/actions/runner/releases/download/v2.332.0/actions-runner-win-arm64-2.332.0.zip -OutFile actions-runner-win-arm64-2.332.0.zip

# Extract the installer
Add-Type -AssemblyName System.IO.Compression.FileSystem ;
[System.IO.Compression.ZipFile]::ExtractToDirectory("$PWD\actions-runner-win-arm64-2.332.0.zip", "$PWD")

OSX x64

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.332.0/actions-runner-osx-x64-2.332.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-osx-x64-2.332.0.tar.gz

OSX arm64 (Apple silicon)

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.332.0/actions-runner-osx-arm64-2.332.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-osx-arm64-2.332.0.tar.gz

Linux x64

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.332.0/actions-runner-linux-x64-2.332.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-linux-x64-2.332.0.tar.gz

Linux arm64

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.332.0/actions-runner-linux-arm64-2.332.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-linux-arm64-2.332.0.tar.gz

Linux arm

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.332.0/actions-runner-linux-arm-2.332.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-linux-arm-2.332.0.tar.gz

Using your self hosted runner

For additional details about configuring, running, or shutting down the runner please check out our product docs.

SHA-256 Checksums

The SHA-256 checksums for the packages included in this build are shown below:

  • actions-runner-win-x64-2.332.0.zip 83e56e05b21eb58c9697f82e52c53b30867335ff039cd5d44d1a1a24d2149f4b
  • actions-runner-win-arm64-2.332.0.zip e7dced5dcf8e8492ec24eb16446047ddccecdb55625f9f6738a96fa9da1bd7f6
  • actions-runner-osx-x64-2.332.0.tar.gz 99755a4f48d81da8d6a59bad6a3216a49394f41d2c842c39f921a1592d7d0733
  • actions-runner-osx-arm64-2.332.0.tar.gz d53bedb30619a64e751bb9f729cc9e9b35eb1df5361651d54daae00db33f2e73
  • actions-runner-linux-x64-2.332.0.tar.gz f2094522a6b9afeab07ffb586d1eb3f190b6457074282796c497ce7dce9e0f2a
  • actions-runner-linux-arm64-2.332.0.tar.gz b72f0599cdbd99dd9513ab64fcb59e424fc7359c93b849e8f5efdd5a72f743a6
  • actions-runner-linux-arm-2.332.0.tar.gz 84ac6dda50f941c7bc4952a20af0c4147caa96bdb2cb2494e7a5eb630d63753b
aws/aws-cli (aws/aws-cli)

v2.34.4

Compare Source

v2.34.3

Compare Source

v2.34.2

Compare Source

v2.34.1

Compare Source

v2.34.0

Compare Source

v2.33.31

Compare Source

v2.33.30

Compare Source

v2.33.29

Compare Source

v2.33.28

Compare Source

v2.33.27

Compare Source

v2.33.26

Compare Source

v2.33.25

Compare Source

v2.33.24

Compare Source

v2.33.23

Compare Source

v2.33.22

Compare Source

v2.33.21

Compare Source

v2.33.20

Compare Source

v2.33.19

Compare Source

v2.33.18

Compare Source

v2.33.17

Compare Source

v2.33.16

Compare Source

v2.33.15

Compare Source

v2.33.14

Compare Source

v2.33.13

Compare Source

v2.33.12

Compare Source

v2.33.11

Compare Source

v2.33.10

Compare Source

v2.33.9

Compare Source

v2.33.8

Compare Source

v2.33.7

Compare Source

v2.33.6

Compare Source

v2.33.5

Compare Source

getsops/sops (getsops/sops)

v3.12.1

Compare Source

Installation

To install sops, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.12.1/sops-v3.12.1.linux.amd64

# Move the binary in to your PATH
mv sops-v3.12.1.linux.amd64 /usr/local/bin/sops

# Make the binary executable
chmod +x /usr/local/bin/sops
Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.12.1/sops-v3.12.1.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.12.1/sops-v3.12.1.checksums.pem
curl -LO https://github.com/getsops/sops/releases/download/v3.12.1/sops-v3.12.1.checksums.sig

# Verify the checksums file
cosign verify-blob sops-v3.12.1.checksums.txt \
  --certificate sops-v3.12.1.checksums.pem \
  --signature sops-v3.12.1.checksums.sig \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:

# Verify the binary using the checksums file
sha256sum -c sops-v3.12.1.checksums.txt --ignore-missing
Verify artifact provenance

The SLSA provenance of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an in-toto link metadata file named sops-v3.12.1.intoto.jsonl. To verify the provenance of an artifact, you can utilize the slsa-verifier tool:

# Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.12.1/sops-v3.12.1.intoto.jsonl

# Verify the provenance of the artifact
slsa-verifier verify-artifact <artifact> \
  --provenance-path sops-v3.12.1.intoto.jsonl \
  --source-uri github.com/getsops/sops \
  --source-tag v3.12.1

Container Images

The sops binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies.

These container images are available for the following architectures: linux/amd64 and linux/arm64.

GitHub Container Registry
  • ghcr.io/getsops/sops:v3.12.1
  • ghcr.io/getsops/sops:v3.12.1-alpine
Quay.io
  • quay.io/getsops/sops:v3.12.1
  • quay.io/getsops/sops:v3.12.1-alpine
Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of an image, run the following command:

cosign verify ghcr.io/getsops/sops:v3.12.1 \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  -o text
Verify container image provenance

The container images include SLSA provenance attestations. For more information around the verification of this, please refer to the slsa-verifier documentation.

Software Bill of Materials

The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an SPDX JSON file, formatted as <binary>.spdx.sbom.json.

What's Changed

Full Changelog: getsops/sops@v3.11.0...v3.12.1

google/go-containerregistry (google/go-containerregistry)

v0.21.2

Compare Source

What's Changed

Full Changelog: google/go-containerregistry@v0.21.1...v0.21.2

v0.21.1

Compare Source

This release fixes a regression in crane introduced in the previous release.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

v0.21.0

Compare Source

This release updates the minimum Go version to 1.25.6.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.7...v0.21.0

helm/helm (helm/helm)

v4.1.1: Helm v4.1.1

Compare Source

Helm v4.1.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • fix: fine-grained context options for waiting #​31735
  • fix: kstatus do not wait forever on failed resources #​31730
  • fix: Revert "Consider GroupVersionKind when matching resources" #​31772
  • fix: handle nil elements in slice copying #​31751
Installation and Upgrading

Download Helm v4.1.1. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.2 and 3.20.2 are the next patch releases and will be on March 11, 2026
Changelog
  • feat(kstatus): fine-grained context options for waiting 5caf004 (Matheus Pimenta)
  • bugfix(kstatus): do not wait forever on failed resources 2519a88 (Matheus Pimenta)
  • Revert "Consider GroupVersionKind when matching resources" b2c487c (Matheus Pimenta)
  • fix(copystructure): handle nil elements in slice copying 261387a (Philipp Born)
kubernetes-sigs/krew (kubernetes-sigs/krew)

v0.5.0

Compare Source

Installation

To install this release, refer to the instructions at https://github.com/kubernetes-sigs/krew/blob/v0.5.0/README.md.

Release Assets

Artifacts for this release can be downloaded from the following links.
It is recommended to follow installation instructions
and not using these artifacts directly.

Thanks to our contributors for helping out with v0.5.0:

  • Tyler Auerbeck
  • Danny Kulchinsky
  • mattn
  • ls-2018
  • Mikel Olasagasti Uranga
  • Ishaan Mittal
  • Ahmet Alp Balkan

(krew v0.5.0 was tagged on Thu Feb 26 02:31:09 UTC 2026.)

Merged pull requests
  • add optional netrc authentication support for plugin downloads #​897
  • docs for netrc auth #​899
  • Update to Go 1.25 and latest Go dependencies #​890
  • feat: speed up ci #​884
  • Fix: Non-constant format string in PrintWarning #​877
  • Bump GitHub actions to latest stable #​881
  • bump golangci-lint to v2 #​880
  • Add workaround for msys2/cygwin git #​873
kubernetes/kubernetes (kubernetes/kubernetes)

v1.35.2

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

v1.35.1

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

mikefarah/yq (mikefarah/yq)

v4.52.4

Compare Source

v4.52.2

Compare Source

v4.52.1: - TOML roundtrip and more!

Compare Source

  • TOML encoder support - you can now roundtrip! #​1364
    • Parent now supports negative indices, and added a 'root' command for referencing the top level document

    • Fixed scalar encoding for HCL

    • Add --yaml-compact-seq-indent / -c flag for compact sequence indentation (#​2583) Thanks @​jfenal

    • Add symlink check to file rename util (#​2576) Thanks @​Elias-elastisys

    • Powershell fixed default command used for __completeNoDesc alias (#​2568) Thanks @​teejaded

    • Unwrap scalars in shell output mode. (#​2548) Thanks @​flintwinters

    • Added K8S KYAML output format support (#​2560) Thanks @​robbat2

    • Bumped dependencies

    • Special shout out to @​ccoVeille for reviewing my PRs!

Thanks to everyone that contributed ❤️


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@talos-bot talos-bot moved this to In Review in Planning May 26, 2025
@smira smira removed this from Planning May 27, 2025
@renovate renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from 274fe1c to 8393275 Compare June 6, 2025 18:20
@renovate renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from 24e866b to 9952fc2 Compare June 14, 2025 16:01
@renovate renovate bot force-pushed the renovate/dependencies branch from 9952fc2 to 42d3a23 Compare June 28, 2025 12:11
@renovate renovate bot force-pushed the renovate/dependencies branch from 42d3a23 to d7f3ce7 Compare July 5, 2025 20:04
@renovate renovate bot force-pushed the renovate/dependencies branch from d7f3ce7 to 8bb4889 Compare July 12, 2025 20:12
@renovate renovate bot force-pushed the renovate/dependencies branch from 8bb4889 to 1908b19 Compare July 26, 2025 04:12
@renovate renovate bot force-pushed the renovate/dependencies branch 6 times, most recently from e9c9f70 to b35d176 Compare August 9, 2025 03:58
@renovate renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from 68f85b3 to 7fdac2b Compare August 16, 2025 19:50
@renovate renovate bot force-pushed the renovate/dependencies branch 5 times, most recently from eb5b7a1 to c7a9a97 Compare August 24, 2025 03:48
@renovate renovate bot force-pushed the renovate/dependencies branch 4 times, most recently from f357a8b to 68cafaa Compare September 6, 2025 03:25
@renovate renovate bot force-pushed the renovate/dependencies branch 4 times, most recently from 267ad49 to b185593 Compare October 8, 2025 23:05
@renovate renovate bot force-pushed the renovate/dependencies branch 7 times, most recently from 9bd120d to 8cce579 Compare October 16, 2025 13:03
@renovate renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from 136a96c to 2759431 Compare October 23, 2025 07:29
@renovate renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from 44571ce to 784149e Compare November 1, 2025 08:02
@renovate renovate bot force-pushed the renovate/dependencies branch from 784149e to 5e18629 Compare November 8, 2025 12:15
@renovate renovate bot force-pushed the renovate/dependencies branch 5 times, most recently from 43324f0 to d3df0ef Compare November 22, 2025 15:52
@renovate renovate bot force-pushed the renovate/dependencies branch 4 times, most recently from 3809191 to f60dace Compare December 1, 2025 23:50
@renovate renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from cec6fed to 5ed6306 Compare December 4, 2025 12:48
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants